Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0da807cf-9bad-3510-a605-b990813b5a9f.roa
File:                     0da807cf-9bad-3510-a605-b990813b5a9f.roa (raw, json)
Hash identifier:          q3Yng6j/IPg1eYQaw63kUQOyP28PInrAv3Taoamqq2Q=
Subject key identifier:   32:19:14:65:D3:2E:AA:15:A7:9B:1A:6C:BC:24:25:84:BA:37:56:2D
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D8B326704916A61B5F00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0da807cf-9bad-3510-a605-b990813b5a9f.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.49.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d8:b3:26:70:49:16:a6:1b:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=0508a582-b11a-4b0b-b6d8-fc88dcc2d68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:44:a1:17:89:0c:e0:88:a5:0a:0f:44:e4:
                    5a:30:a1:0f:df:c4:82:2e:b1:6f:f8:8c:57:da:1b:
                    24:61:b6:2e:03:24:c2:fa:25:4d:10:a5:db:30:e3:
                    62:22:81:49:41:0c:3f:d5:f3:45:26:c2:40:6e:e2:
                    d3:34:32:7d:5f:43:e0:15:7e:cf:6d:29:e1:8a:b1:
                    95:44:ef:09:9f:f8:bd:23:d2:76:41:02:46:44:45:
                    9a:dc:b8:31:95:7c:86:45:29:38:6c:24:6d:46:c5:
                    4e:eb:94:41:51:05:c7:9e:c1:7d:2f:ea:f9:36:b1:
                    11:8e:3c:f8:c8:90:ea:f7:38:47:6c:fb:8c:f3:2e:
                    d0:ef:dd:b4:30:60:41:54:60:1e:e3:90:3b:7b:30:
                    4d:de:1b:73:11:18:72:4c:25:cc:40:c2:73:ac:3a:
                    84:95:41:76:83:5b:8c:11:8a:1e:9a:10:07:b3:82:
                    eb:fe:22:62:23:53:42:5a:30:a8:9d:5b:e0:58:30:
                    57:da:a9:8b:d7:d9:85:ef:31:44:38:a6:7d:3e:6e:
                    d6:c8:fd:36:75:42:93:58:b4:96:5e:61:96:29:2b:
                    a8:c0:1b:d5:13:ed:f8:36:2d:f3:28:01:55:b3:75:
                    87:b9:19:7d:fa:4e:7d:16:3f:ab:13:58:56:5d:05:
                    a8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:19:14:65:D3:2E:AA:15:A7:9B:1A:6C:BC:24:25:84:BA:37:56:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0da807cf-9bad-3510-a605-b990813b5a9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.49.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:3a:c9:8b:df:27:da:7b:a9:d2:9b:1e:9f:19:9e:ee:bb:4b:
         20:10:ca:90:27:3e:c2:a7:d2:5c:d3:77:68:ec:f8:71:27:6a:
         0e:59:f5:04:94:e5:68:d9:a0:00:a1:3e:c1:8f:ad:8c:36:cf:
         e2:3d:ab:a5:20:a8:de:33:f5:b9:43:02:21:f5:75:15:c9:7b:
         66:da:87:25:ba:7b:18:b6:7f:dc:99:43:10:b0:bf:08:c6:65:
         c4:a2:48:aa:d6:06:f4:de:83:e3:ff:8f:f2:0c:86:82:70:b8:
         e0:bb:91:dd:f6:58:ec:d0:a5:c6:e1:4a:cf:0b:d4:60:bc:8a:
         26:b1:51:43:59:49:7a:ca:75:fc:8e:7c:e5:9a:aa:e6:48:da:
         fa:d8:e1:9e:0b:6a:d1:e9:35:34:4a:f9:ef:bc:8a:1a:df:d6:
         c2:bc:b4:d1:10:8a:08:8c:65:0d:ea:f5:38:90:83:cf:ee:49:
         10:0f:4c:d8:39:70:11:42:d2:83:17:56:7e:08:84:e0:43:72:
         4e:81:8c:4a:f8:05:4a:ef:d4:b2:5a:3c:41:99:22:50:27:c1:
         41:64:af:bd:aa:1c:6c:98:bf:e5:2e:fc:72:60:93:0c:e7:4c:
         de:71:f3:87:4c:6c:a9:f5:e7:55:d2:2e:9c:a7:ab:a2:a3:f8:
         98:d9:bb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----